2 ms·
Last summer I was looking into a building a little project that could do just that. TL, DR: It looks like those with the patience to compile a kernel+drivers
by paws 8y ago
Last summer I was looking into a building a little project that could do just that.
TL, DR:
It looks like those with the patience to compile a kernel+drivers can probably manage using Denverton boards [1]. I was blocked by no available drivers last year but hope to come back to my build project in the fall.
NB: I'm just a casual tinkerer not an expert.
Back story:
Last summer when Intel shipped Denverton, QAT (which offloads crypto) apparently got a substantial speed boost and I saw claims that 10GbE IPSec should be possible. Denverton boards vary but some top end ones apparently ship with 4 10GbE NICs [2].
Back then the issue was that the QAT drivers weren't ready, so I put my project on hold. Today I see Intel has apparently shipped Linux and FreeBSD drivers. [3] Would of course be nice to see these drivers land upstream but no idea what the licensing story is like here.
[1] https://www.servethehome.com/intel-atom-c3000-series-launch-skus-differentiation/ https://www.servethehome.com/intel-atom-c3000-series-launch-...
[2] https://www.servethehome.com/supermicro-a2sdi-h-tp4f-review/ https://www.servethehome.com/supermicro-a2sdi-h-tp4f-review/
[2] https://01.org/intel-quick-assist-technology/downloads https://01.org/intel-quick-assist-technology/downloads
- gonzo 8y agoDepending on the SoC, C3000s have 0, 2 or 4 on-die MACs that will do 10Gbps. Also depending on the Doc, C3000s have no QAT or one that will run at "low", "medium" or "high" speed. The difference is in the number of "engines" that can be in-use. https://ark.intel.com/compare/97935,97928,97930,97929,97937,97934,97938,97926,97939,97932,97936,97931,97940,97933,97927 https://ark.intel.com/compare/97935,97928,97930,97929,97937,... Support for the C3000 NICs is included in pfSense 2.4.4. Support for the C3000 QAT will come later. I can say that we've tested to > 800Gbps on a C3550 using AES-GCM-128 between a pair of the C3558-based systems we sell. This is using AES-NI, not QAT.